Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
General
-
Target
file.exe
-
Size
4.0MB
-
MD5
4879c56a17e0a0870e2b516b1c692509
-
SHA1
e4c12cc04b9405233628a71a8accf158e285aad6
-
SHA256
edd4c28b27289b8154d0cb6a487abef68f79087f554b02eace45e4ee8dd95325
-
SHA512
8aa8de09b36ec5c979a56f69b67cb95e8b7287078ad79ce5a3af8425e494dcfe3befb7e19270be29af982a2ab46fc32554a2561927b8164572f606e3a7310747
-
SSDEEP
98304:c6LMazMnUrV8xRyGguqPW7YBshTe5WepB:xHMUrVuyGgLPLBIKRpB
Malware Config
Signatures
Files
-
file.exe.exe windows x64
Code Sign
16:d0:dc:af:4f:7c:f2:a8:4c:76:42:69:82:56:72:40Certificate
IssuerCN=HDD Verbatim Digital EVO-II 5Tb HDWG460EZSTA N300 (4096rpm) 5036Mb 2.5 RtlNot Before22-01-2023 13:34Not After23-01-2033 13:34SubjectCN=HDD Verbatim Digital EVO-II 5Tb HDWG460EZSTA N300 (4096rpm) 5036Mb 2.5 Rtl90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before11-05-2022 00:00Not After10-08-2033 23:59SubjectCN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d7:16:01:31:c7:de:6d:83:85:68:6e:00:51:44:d5:38:97:99:55:c1:2f:8a:7f:7f:4b:06:d5:f3:ab:b4:10:d1Signer
Actual PE Digestd7:16:01:31:c7:de:6d:83:85:68:6e:00:51:44:d5:38:97:99:55:c1:2f:8a:7f:7f:4b:06:d5:f3:ab:b4:10:d1Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=HDD Verbatim Digital EVO-II 5Tb HDWG460EZSTA N300 (4096rpm) 5036Mb 2.5 Rtl20-01-2023 15:57 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ